SecurityTests/clxutils/certcrl/testSubjects/resourceSigning/resourceSigning.scr

   1 #
   2 # Test Apple Resource Signing cert verification policy
   3 #
   4 globals
   5 allowUnverified = true
   6 crlNetFetchEnable = false
   7 certNetFetchEnable = false
   8 useSystemAnchors = false
   9 end
  10
  11 test = "Full Resource Signing verification success"
  12 cert = leaf.cer
  13 cert = intermediate.cer
  14 root = root.cer
  15 policy = resourceSign
  16 verifyTime = 20061031000000
  17 end
  18
  19 test = "No ExtendedKeyUsage in Leaf"
  20 cert = leafNoEKU.cer
  21 cert = intermediate.cer
  22 root = root.cer
  23 policy = resourceSign
  24 verifyTime = 20061031000000
  25 error = CSSMERR_APPLETP_INVALID_EXTENDED_KEY_USAGE
  26 certerror = 0:CSSMERR_APPLETP_INVALID_EXTENDED_KEY_USAGE
  27 end
  28
  29 test = "Bad ExtendedKeyUsage in Leaf"
  30 cert = leafBadEKU.cer
  31 cert = intermediate.cer
  32 root = root.cer
  33 policy = resourceSign
  34 verifyTime = 20061031000000
  35 error = CSSMERR_APPLETP_INVALID_EXTENDED_KEY_USAGE
  36 certerror = 0:CSSMERR_APPLETP_INVALID_EXTENDED_KEY_USAGE
  37 end
  38
  39 test = "Bad KeyUsage in Leaf"
  40 cert = leafBadKU.cer
  41 cert = intermediate.cer
  42 root = root.cer
  43 policy = resourceSign
  44 verifyTime = 20061031000000
  45 error = TP_VERIFY_ACTION_FAILED
  46 certerror = 0:APPLETP_INVALID_KEY_USAGE
  47 end
  48
  49
  50
  51